VCP-DCV Practice Test 14 — 15 Questions

Question 1

An administrator is troubleshooting performance issues on a vSphere cluster. Which TWO metrics should be monitored to identify CPU ready time contention?

Accepted Answer

Co-Stop. CPU ready time contention occurs when a virtual machine is ready to execute instructions but the ESXi host's CPU scheduler cannot immediately allocate physical CPU cycles. The %RDY metric directly measures the percentage of time a VM is waiting to be scheduled on a physical CPU, while Co-Stop specifically tracks time lost when vCPUs in a single VM are forcibly co-scheduled and then descheduled due to contention on the same physical core. Both metrics are primary indicators of CPU scheduling pressure.

Answer

Disk Kernel Latency

Answer

Memory Swap In Rate

Answer

Network Packet Drop Rate

Question 2

Refer to the exhibit. An administrator notices that the ESXi host is listening on both IPv4 and IPv6 for HTTPS. However, IPv6 traffic is not being forwarded to the host. Which configuration change is most likely needed?

Accepted Answer

Configure a default gateway for the IPv6 stack on the host.. If the ESXi host is listening on IPv6 for HTTPS but IPv6 traffic isn't being forwarded to it, the host likely lacks a default gateway for its IPv6 stack. Without an IPv6 default gateway, the host can communicate on-link but cannot route replies to off-subnet IPv6 clients, so forwarded traffic never returns. Configuring an IPv6 default gateway on the host resolves the routing gap.

Answer

Disable IPv6 and use only IPv4.

Answer

Remove the IPv4 HTTPS listener to force IPv6.

Answer

Enable IPv6 on the vSphere Distributed Switch.

Question 3

An administrator has a vSphere 7 cluster with vMotion enabled. They need to perform a vMotion of a VM from host1 to host2 while preserving the VM's memory state. The VM has a PCIe passthrough device assigned (NVMe controller). What should the administrator do before initiating the vMotion?

Accepted Answer

Remove the PCIe passthrough device from the VM. vMotion does not support VMs with PCIe passthrough devices because the device is tied to the physical host. The device must be removed or the VM must be powered off.

Answer

Use shared storage for the VM

Answer

Enable Enhanced vMotion Compatibility (EVC) on the cluster

Answer

Upgrade to vSphere 8

Question 4

A company's vSphere environment has multiple clusters with varying workloads. The operations team notices that one cluster consistently shows high CPU ready times on several hosts. Which action should be taken to address this performance issue?

Accepted Answer

Reduce the number of virtual CPUs assigned to VMs and consider adding more hosts.. High CPU ready times indicate that VMs are contending for physical CPU resources because the host is over-provisioned with vCPUs relative to available pCPUs. Reducing the number of vCPUs per VM decreases scheduling overhead and contention, while adding more hosts increases the total pCPU count, directly alleviating the bottleneck. Option C correctly addresses both the demand-side (vCPU reduction) and supply-side (host addition) of the CPU scheduling issue.

Answer

Increase the memory allocation of VMs with high CPU ready times.

Answer

Increase the CPU reservation for VMs with high ready times.

Answer

Enable Storage DRS to balance storage I/O load.

Question 5

An administrator has created a standard vSwitch port group with VLAN ID 100. Virtual machines in this port group can communicate with each other but not with devices on the physical network. What is a possible cause?

Accepted Answer

The physical switch port is not configured to pass VLAN 100.. When a standard vSwitch port group is assigned VLAN ID 100, the ESXi host tags outbound frames with VLAN 100 (802.1Q). For those frames to reach the physical network, the physical switch port that the uplink connects to must be configured as a trunk that permits VLAN 100. If the physical switch port is an access port on a different VLAN or does not allow VLAN 100, traffic stays isolated within the virtual switch, which is exactly the symptom described.

Answer

The vSwitch has only one uplink.

Answer

The virtual machines have duplicate MAC addresses.

Answer

The virtual machines are using different subnets.

Question 6

A vSphere administrator is asked to choose a lifecycle management approach for a new cluster of 100 hosts. The cluster will use vSAN and will be updated frequently. The administrator wants to minimize manual intervention and ensure consistency. Which approach should be recommended?

Accepted Answer

Use vSphere Lifecycle Manager with image-based management.. vSphere Lifecycle Manager (vLCM) with image-based management uses a declarative desired-state model where the entire cluster is managed from a single software image that includes ESXi base image, drivers, and firmware. This is the recommended approach for vSAN clusters because it ensures consistency across all hosts and integrates with vSAN's hardware compatibility checks, minimizing manual intervention.

Answer

Manually update each host with the latest ESXi ISO.

Answer

Use vSphere Update Manager with baseline groups for updates.

Answer

Use vSphere Lifecycle Manager with baseline-based management.

Question 7

Which THREE security hardening measures should be applied to an ESXi host? (Choose three.)

Accepted Answer

Enable lockdown mode. Option B is correct because enabling lockdown mode restricts direct root access to an ESXi host, forcing all administrative actions through vCenter Server or an authorized privileged account, which reduces the attack surface from unauthorized local or remote logins. Option D is correct because applying a host profile enforces a consistent, validated set of security configuration settings (such as firewall rules, services, and authentication policies) across ESXi hosts, preventing configuration drift that could introduce vulnerabilities. Option E is correct because disabling the ESXi Shell and SSH services closes unneeded remote-access channels that attackers could exploit; these services should only be enabled temporarily for troubleshooting and then disabled again. Option A is not a security hardening measure—increasing memory for management VMs is a performance/resource tuning action and does not reduce the host's attack surface. Option C, while SNMPv3 does provide authentication and encryption compared to earlier SNMP versions, is not one of the three required hardening measures here and enabling SNMP at all can expose management information, so it is not selected as a correct answer.

Answer

Increase memory resource allocation for management VMs

Answer

Enable SNMP v3

Question 8

A customer wants to ensure that all hosts in a cluster run the same ESXi version and firmware. Which vSphere feature should they use?

Accepted Answer

vSphere Lifecycle Manager (vLCM). vSphere Lifecycle Manager (vLCM) manages a cluster against a single desired image that includes both the ESXi base image and firmware/add-ons, ensuring all hosts converge to the same ESXi version and firmware. This desired-state model is exactly what the customer needs to guarantee uniformity across the cluster.

Answer

vSphere Update Manager (VUM)

Answer

Host Profiles

Answer

vSphere Replication

Question 9

During a vLCM remediation, one host fails with error 'Could not complete the operation due to a network error'. What is the first troubleshooting step?

Accepted Answer

Check network connectivity between vCenter and the host.. The error 'Could not complete the operation due to a network error' during vLCM remediation indicates that vCenter Server lost communication with the ESXi host mid-operation. Since vLCM remediation pushes an image payload from vCenter to the host over the management network, the first logical step is to verify that vCenter can reach the host on the management VMkernel interface (typically port 443 and 902). Confirming connectivity rules out transient network issues before touching the vLCM image or host state.

Answer

Reset the vLCM image.

Answer

Restart the vLCM service.

Answer

Reboot the host.

Question 10

An administrator is troubleshooting a failed vSphere Lifecycle Manager remediation operation on a cluster. The error message in the vLCM UI states: 'Hardware Compliance Check failed: The ESXi host does not meet the hardware requirements for the selected image.' The administrator verifies that the host is in the vSphere Hardware Compatibility List (HCL) for the ESXi version. What additional step should the administrator take to resolve this issue?

Accepted Answer

Update the vLCM hardware compatibility plug-in to the latest version.. The error indicates that vLCM's hardware compatibility check failed even though the host is on the HCL. This often occurs when the vLCM hardware compatibility plug-in (provided by the hardware vendor) is outdated or not installed, preventing vLCM from correctly assessing the host's hardware against the desired image. Updating the plug-in to the latest version ensures accurate compliance checks.

Answer

Remove the host from the cluster and re-add it after a clean installation.

Answer

Use the vSphere Client to export the host's hardware compatibility report.

Answer

Manually add the host's hardware to the vCenter server's HCL database.

Question 11

A VM experiences high packet loss during peak hours. The VM is connected to a distributed switch port group with a traffic shaping policy: average bandwidth 100 Mbps, peak bandwidth 200 Mbps, burst size 50 KB. What is the most likely cause?

Accepted Answer

The burst size is too small, causing packets to be dropped when burst traffic exceeds the average.. Traffic shaping allows sustained traffic up to the average bandwidth (100 Mbps) and only permits bursts up to the peak bandwidth (200 Mbps) within the configured burst size. If the burst size is too small, burst traffic above the average during peak hours will be dropped, causing packet loss. The peak bandwidth limit is not necessarily being exceeded, a disabled policy would remove these shaping drops, and while a physical uplink slower than 200 Mbps could cause loss, the most likely cause given the configured policy and peak-hour burst behavior is the too-small burst size.

Answer

The peak bandwidth limit is being exceeded.

Answer

The traffic shaping policy is disabled.

Answer

The physical uplink speed is less than 200 Mbps.

Question 12

A vSphere administrator notices that one ESXi host in a DRS-enabled cluster is consistently running at 95% CPU utilization while other hosts average 40%. Which action should the administrator take to determine the cause?

Accepted Answer

Review the host's performance charts in vCenter for CPU contention metrics.. The correct first step in diagnosing a performance imbalance is to gather data before changing configuration. Reviewing the host's performance charts in vCenter provides CPU contention metrics such as CPU usage, ready time, and co-stop, which reveal whether the host is genuinely overloaded or if VMs are contending for resources. This evidence-based approach identifies the root cause before any DRS tuning is attempted.

Answer

Increase the DRS migration threshold from 3 to 5.

Answer

Place the host into maintenance mode to isolate the problem.

Answer

Set the DRS automation level to Fully Automated.

Question 13

An organization is using vSphere Trust Authority (vTA) to secure ESXi hosts. A newly added ESXi host fails to attest with the Trust Authority. The administrator verifies that the host is connected to the vTA cluster and the trust relationship is configured. What is the most likely cause of the attestation failure?

Accepted Answer

The TPM on the ESXi host is disabled or not properly initialized.. vSphere Trust Authority attestation depends on a functioning, properly initialized TPM 2.0 on each ESXi host. The host's TPM measures the boot process (UEFI Secure Boot, bootloader, VMkernel modules) and produces quotes that the Trust Authority verifier compares against a trusted baseline. If the TPM is disabled in BIOS/UEFI or has not been initialized (no Endorsement Key taken ownership), the host cannot produce valid attestation quotes, so attestation fails even though the trust relationship and network connectivity are fine.

Answer

The Trust Authority's network is isolated from the ESXi host's management network.

Answer

The ESXi host is not in the same cluster as the Trust Authority.

Answer

The ESXi host does not have a virtual Trusted Platform Module (vTPM) attached.

Question 14

Which TWO are correct statements about vSphere resource pools? (Select two.)

Accepted Answer

Resource pools can be nested.. Correct: A (resource pools can be nested) and E (resource pools can have shares, limits, and reservations). Option B is false because resource pools aggregate resources for multiple VMs, not isolate individual VMs. Option C is false because child resource pools do not inherit settings from their parent by default; they have their own allocations unless explicitly configured. Option D is false because resource pools are available on standalone hosts as well as clusters.

Answer

Resource pools can be used to isolate performance for individual VMs.

Answer

Resource pools inherit settings from parent pools by default.

Answer

Resource pools are only available in clusters.

Question 15

During a security audit, it is found that the vCenter Server is using the default self-signed certificate. The administrator is tasked to replace it with a certificate from an enterprise CA. What is the first step after obtaining the CA-signed certificate?

Accepted Answer

Convert the certificate and private key into PEM format and place them in the appropriate directory.. The certificate must be in a format that vCenter can use; typically, it needs to be combined with the private key. Option B is premature before preparing the certificate. Option C is incorrect because certificate import is done via certificate management tools, not vSphere Web Client. Option D is incorrect because the private key is included in the signed certificate generation process, not imported separately.

Answer

Use the vSphere Web Client to upload the certificate.

Answer

Import the private key into the Windows Certificate Store.

Answer

Restart the VMware Certificate Service.